390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9.exe
Size 206KB
Sample241115-222bmatlay
SHA256 390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9
MD5 f5656d4258ff419833417a87db192894
SHA1 51968853b38501c3f6cc8c0aac61d7dcd42098d6
SHA512 ae67ac62720ab8b8d24df4837ce29d4da3b7d94fc90f1c2a15eb255142ac67ffa3c46abe471496eab7664831e393d2547f1270fa18206c5cbe55df158bbec78f
SSDEEP 6144:V+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:V+U9qyFhJy56d/eoyXjn9W+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9.exe

File Explorer

390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9.exe

.exe 206KB

390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9.exe

IMPHASH e7f2d5507b09bfb1c824fe29a99d8a60
SHA256 390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9
MD5 f5656d4258ff419833417a87db192894
SHA1 51968853b38501c3f6cc8c0aac61d7dcd42098d6
SHA512 ae67ac62720ab8b8d24df4837ce29d4da3b7d94fc90f1c2a15eb255142ac67ffa3c46abe471496eab7664831e393d2547f1270fa18206c5cbe55df158bbec78f
SSDEEP 6144:V+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:V+U9qyFhJy56d/eoyXjn9W+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DosDateTimeToFileTime GetSystemDirectoryW WriteFile GetProcAddress CreateFileA GetModuleHandleA CreateDirectoryA FileTimeToSystemTime IsBadStringPtrA GetSystemDirectoryA GetTimeFormatA lstrcpyn LocalAlloc OpenWaitableTimerA EnumCalendarInfoA GetNamedPipeInfo IsValidCodePage

user32

EnumChildWindows GetSysColor DialogBoxParamA CreateMenu EnumDesktopsA GetClassNameA CharNextA ReleaseDC RegisterWindowMessageA EnumWindows InvalidateRgn SetWindowLongA ShowCursor CreateAcceleratorTableW GetCaretPos SetFocus UnregisterClassW PeekMessageW SetMenu GetMenuItemInfoA LoadImageA SendMessageW DialogBoxIndirectParamA CopyRect GetWindowRect GetScrollPos CopyImage GetSysColorBrush PostQuitMessage CheckDlgButton GetDC IsWindowEnabled FillRect CharLowerA CreateDesktopA UpdateWindow SetCapture SendDlgItemMessageW LoadBitmapW CreateWindowExW GetDlgItemTextA DefDlgProcA GetKeyboardType DefWindowProcW CloseWindow DestroyIcon SetActiveWindow CharUpperW

gdi32

GetPixelFormat GetMetaRgn GetEnhMetaFilePaletteEntries GetWorldTransform GetTextExtentExPointA GetPath GetLogColorSpaceW

advapi32

RegOpenKeyExA RegCreateKeyExW RegCloseKey RegDeleteValueW RegReplaceKeyA RegEnumValueA

shell32

StrCmpNIA StrRStrA StrStrIA

winspool.drv

EnumPrinterDataA AddPortW DocumentPropertiesW GetJobA ConfigurePortA AddMonitorA EnumPrinterKeyA EndPagePrinter DocumentPropertySheets

inetcomm

MimeOleConvertEnrichedToHTML MimeOleSMimeCapInit MimeOleGetBodyPropW MimeEditViewSource DllGetClassObject MimeOleCreateMessageParts MimeOleCreateBody HrGetDisplayNameWithSizeForFile CreateIMAPTransport HrFreeAttachData HrGetLastOpenFileDirectoryW MimeOleGetCodePageCharset MimeEditDocumentFromStream

crypt32

CryptSignCertificate CertCreateCRLContext CryptMsgOpenToDecode CertIsValidCRLForCertificate CryptGetOIDFunctionAddress CertAddEncodedCertificateToStore

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dHGmL

Size

1KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lzmjSu

Size

512B

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YOSWO

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sTDEgl

Size

2KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fwQO

Size

3KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kubC

Size

1024B

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hkw

Size

1KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

390d649a0bfa6b64872cf1e9d1c05734f4b1116c76fefb7dba42fa634784a6b9.exe

kernel32

user32

gdi32

advapi32

shell32

winspool.drv

inetcomm

crypt32

generic